last executing test programs: 10.235379356s ago: executing program 1 (id=4340): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c7b4408070a64006e40010203030902310001a82300000904000002ca744d", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227e, &(0x7f0000000680)) r3 = open(0x0, 0x0, 0xb4) openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth1\x00', 0x4000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x200200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x840000000002, 0x3, 0xff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000001c0), 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) 7.228218157s ago: executing program 4 (id=4358): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="1400000035000b63c35a806415da49740b4c", 0x12}], 0x1}, 0x0) mbind(&(0x7f0000047000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000001000)=""/102383, 0x18fef}], 0x1, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffae}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @broadcast, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 6.794065703s ago: executing program 1 (id=4361): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) read(r0, 0x0, 0x0) 6.548996968s ago: executing program 1 (id=4364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xffffffffffffff97, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x2ecd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400010}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x10, @mcast1}}) io_uring_enter(r2, 0x4d92, 0x0, 0x0, 0x0, 0x0) r5 = fanotify_init(0x5c, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) keyctl$reject(0x14, 0x0, 0x1ffffffd, 0x2, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x28a8c2, 0x0) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x6, 0x4, 0x40, r7, 0x3d, '\x00', r8, r7, 0x5, 0x7, 0x3, 0x8000000000011}, 0x45) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x0, 0xffdffbff, 0x2}, 0x48) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000a000200053582c137153e3704000180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x48001051, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r11, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r11, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r11, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r11, 0x40045569, 0xd) ioctl$UI_DEV_CREATE(r11, 0x5501) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) 6.541204264s ago: executing program 4 (id=4365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300), 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x800443d2, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x2a0, 0x528, 0x1d0, 0x1d0, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x7400}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x7c}}, 0x20004081) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x10, 0xa0, 0xfd, 0x20, 0x2c42, 0x16f8, 0xbae3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0x51, 0xd2}}]}}]}}, 0x0) 4.164557357s ago: executing program 4 (id=4375): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) read(r0, 0x0, 0x0) 4.101827321s ago: executing program 1 (id=4378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184d, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc00000000000000", 0x37}], 0x1) syz_io_uring_setup(0x1ce3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 3.939082926s ago: executing program 2 (id=4379): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f0000000100)=@tcp6=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f0000000780)=0x20b) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) pivot_root(&(0x7f0000000080)='./file0/file0/file0/file0/file0\x00', 0x0) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='( . '], 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x1, 0x6, 0x5, 0x1, 0x8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x3557, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[r3, r3], &(0x7f00000002c0)=[{0x3, 0x5, 0x3, 0x1}]}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000000c0)='./file0\x00', r7}, 0x18) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0x0, r8) r9 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0900000000000000b57a5025ccca9e00360db70100000040fad95667e03db8a9d678f3b21fdf06dcdf63951f215ce3bb9ad809d5e1e11a81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) 3.869082179s ago: executing program 4 (id=4381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="a7287e61252d753d7c38ca73ac8706d4549dd2", @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00') syz_usb_connect(0x0, 0x34, &(0x7f0000000d40)={{0x12, 0x1, 0x0, 0x4a, 0xa2, 0xff, 0x40, 0x1b3d, 0x1a4, 0x7f41, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xef, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000240)=""/40, &(0x7f00000003c0)=0x28) symlinkat(&(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x38, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @clear_death={0x400c630f, 0x3}, @request_death], 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window, @timestamp, @mss, @mss, @timestamp], 0x8) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[], 0x440) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f0000000000)={[0x9]}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 2.97422424s ago: executing program 2 (id=4382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x7e]}]}, 0xa8}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf257700000008000300", @ANYRES32=0x0, @ANYBLOB="0500ee00040000000500ee00bb0000000800cf00020000000800ef001c8ea0d8"], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082cbd7000fcdbdf257900000008000300", @ANYRES32=r3, @ANYBLOB="0400f4000400f4000400f400f400ab3d129d6fb233509fa91f11e60710f2230f631f0d7ed72211afedb12b59ae0377a8051a0bf5da86a89108000000000000006989a6993fc66640c2a2877ccbde4abc4a88db68aaac598527ca8ebf56c8da1506108fb71ca807da5b4c73f4a32d68ae9b23"], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='ext4_ext_show_extent\x00', r1}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=@deltaction={0xf4, 0x31, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket(0x2c, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) fsetxattr$system_posix_acl(r8, &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x5c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3b, 0x33, @beacon={{{}, {}, @device_a, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}}}]}, 0x5c}}, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @private}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='batadv_slave_1\x00', 0x9, 0x0, 0x9}) getsockopt$EBT_SO_GET_INFO(r12, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0xb, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x3) 2.762196124s ago: executing program 1 (id=4383): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xd00, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) syz_usb_ep_read(r5, 0x3, 0xff33, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_create_ruleset(&(0x7f0000000780)={0x7a63}, 0x10, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) iopl(0x3) syslog(0x3, 0xfffffffffffffffd, 0x10) setresuid(0x0, r7, 0x0) syz_clone3(&(0x7f0000005140)={0x10000080, 0x0, &(0x7f0000000700), &(0x7f0000000740), {0xb}, &(0x7f0000005040)=""/18, 0x12, &(0x7f0000005080)=""/107, &(0x7f0000005100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) 2.682462234s ago: executing program 0 (id=4384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x5}, 0x53}, 0x10) (async) r2 = socket(0x22, 0x2, 0x2) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x1) (async) sendto$inet(r2, &(0x7f0000000080)="dfb4a82b57e5fb9157beed4ddbdd6afa323924414a2233e367e0b5d033df772e90b5a95c4f5547aa85a6b83690a29bd469dda58c2abadd6c7c347450b0b5ae7ae4eaee3090ddcb96d2588806aa4d99eb9f2a509ac5a0768c3e14a5baea", 0x5d, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x4, 0x8, 0x3}, 0xc) 2.552994916s ago: executing program 0 (id=4385): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000200)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="1400000035000b63c35a806415da49740b4c", 0x12}], 0x1}, 0x0) mbind(&(0x7f0000047000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x4, 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffd) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000001000)=""/102383, 0x18fef}], 0x1, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffae}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @broadcast, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "13757ddc688782636517333c0303dace01a10969cc9f4efe748fb63ea78c9aef"}}) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 2.381725329s ago: executing program 2 (id=4386): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) 2.380405239s ago: executing program 3 (id=4387): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = dup2(r0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0x8ecc, 0x0, 0x0, 0x5}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r2 = socket$inet(0x2, 0x802, 0x1) write(r2, &(0x7f0000000000)="06001c00773c8000", 0x8) 2.117324603s ago: executing program 3 (id=4388): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500626f6e645f736c6076655f300000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 1.964097334s ago: executing program 0 (id=4389): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000004000)={0x2020}, 0x2020) read(r0, 0x0, 0x0) 1.837250253s ago: executing program 3 (id=4390): creat(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x2a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0, r2, 0xa000000}}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16], 0x24}}, 0x0) 1.836939678s ago: executing program 0 (id=4391): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) read(r0, 0x0, 0x0) 1.793722073s ago: executing program 3 (id=4392): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f0000000100)=@tcp6=r2}, 0x20) ioctl$int_in(r2, 0x5452, &(0x7f0000000780)=0x20b) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) pivot_root(&(0x7f0000000080)='./file0/file0/file0/file0/file0\x00', 0x0) r5 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='( . '], 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x1, 0x6, 0x5, 0x1, 0x8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x3557, 0xffffffffffffffff, 0x1, &(0x7f0000000280)=[r3, r3], &(0x7f00000002c0)=[{0x3, 0x5, 0x3, 0x1}]}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f00000000c0)='./file0\x00', r7}, 0x18) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r8, 0x0, r8) r9 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001e0081064e81f782db44b9040202080006007c09e8fe08a10a0015c00200142603600e120d000d0024000000a8000e001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0900000000000000b57a5025ccca9e00360db70100000040fad95667e03db8a9d678f3b21fdf06dcdf63951f215ce3bb9ad809d5e1e11a81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) 1.759657941s ago: executing program 0 (id=4393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000180)) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184d, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeff", 0x3d}], 0x1) syz_io_uring_setup(0x1ce3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, r1}, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x11, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) 1.668119663s ago: executing program 1 (id=4394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x1188, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x115c, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x1148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x113c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "744ac05b81dc208db50ddfd25c3200e9a143e468bf12cf37fc55b8b135fc673591424be99cbd3a18003e779a7c4dd3c5de8002e46f5211c0e5409bf48532de5e9a158d4855a1b749ee7e8a75c90129752b3a87f64d174fce379707ef2e80293ffb6e507391de49d6688598d7647ddca3692903347cb0d5e201efc464be7af951a34212db53d3f84d3f5e6ce401de0ec80d0f48f72c3a8731f311b6b2ce1b68e84484befb4ab9f31daea8ef5aa177a3cd096d1f433fb6d18688cc9ab4ed8c86f6740e3431987005b6ee3ac6c2"}, @NFTA_DATA_VALUE={0x1004, 0x1, "efb4862d194ddfd7ba1916314e26d35d778f59d1e1971bddcbe1191e4c60ececd708b38ef9c77869b1a54270397fec04ceab902d951a6f40a22768b59944579cdd6368d30f086c231ffad3d1a00e79c14d6ccc3527fa719edfd64ef75b3ff4ee7c435e6064de8a54d3db4dbd34299078be1d155c50e3ae5a5a88736d714e3105e1139267b2014a7e4fa1e31f00dab01178e5a2d527d85822c9fcdd07f7a559d5f6d978292545eb9864a8ce272ef0e5be8171efdb363334153735f7bc64a2084a9f7e4fe9095c8e87416de00d6896d21cfdaa51e685b8fe2233dce71b95a1ab2a66ef93a79a41a78309ef2bce1e97bd9f9aa17fe639adcd7e8b587ee267cb85c0935fba736e2ca0ab41d578cb113936acaa9af9b2863bced8661bd76b262cf04f1280d79adb607b80be3aa121f30c087909841f2dca1b85495bdb0295d302b37c20ce722919537d6ec1fc08955b735a68fe8e7839cdc2620b177746988bee5bd416dbf5d09db3557b8aef7c96d21d34a1ef20450404519dc054546bc7f7c1fdc9e1b5c8d89743ed8a58e657d039e598f16162efb3f5670e2a51abd3e308a11e957a38f8720c232d10d4fff9443c88e7a5bf9297b24226836333e1f5a1ed0c71e7a2f0c3019c1c74cf09bd67d51bfeb89692f41f0733f7da19fc0a6f0a8393d159124ac1a0b5bc500511615d105a910ffb9ef8cedd7d02c6405b6d6c087187c0c1d3165154c83b9c91e34ad378340b0e989be633b2c0ae8a0c9042b387931f497fa3d7d480e37a4c848a35373f546ab0af4a5d39cab889096bdb5fb144effc7928bc493af1b353e720fd4967888c4810e7aeb83f78e0088e4431b922b3cabf76491c85bc9186ad991c252da894bf5f4bd3636facd667b990205da30ec9f6bf090ca9a2ae3ecb7cba4e6697c5a546e4c5cc7572e35ef207838fb2c09cf11591827654c936ffbb618b2e24247d74f181636c02466e1f6c7ec20de723f65584307663e81df3fc91cc7b573e809e2acb7e853005b74c14e54b76ce587d2ad9244c0499aa255cd2087d7529bae0296fe534a54a3fb51fe8780ddf1a02ef6854b5b36706d41621f422689b2be829959bf857464232c3f28788fd50d4c6db07371a3d55ad16ebd03c0f4f36cc7a71501b1d653b4629f5be5a39e19c7f617250cce1ff95179ede04d40c600d125a072dcfdcac9b13c93c2f749e80d273787c2bcf541108a346682bada480b4cf19a98533ec016b21e4163742cc55850037fc99cec1afae5e533a0a8837e3394e5afec501d5ff381390c9d0795a51c6152a682d98a7f961e59ae89bfcb17076448cba56f8646ff98104cd0304c11e6da2a56abc08624d567947f7160bd2c2f94cfd64b9c973b8d266842e21f74d2e8dcfabaa4796ebc84867e5ce90e457d2d6ceb5af4d63bfbc3e65fc9ad9513917a7c6d58ec3321103ca1f8237272c0ca61eb41afc33a4dc9c5826996bc8641aa6ccce0cdecb83a86a3fe832f6c58fa3fccc5a912eb12336d3d3e8a236f20433ea6832d6e97bd3afeebf4e91eb9674168ae7aee1be83aa5ef1fa330f6dbc82d7d3a06980c70f9f579d6e6f2a1a90f8af3b12b5be4bf45fdb62a9a48a791bec5c2f8c4511cd31185335800ff9b8971abd19d910356e3ced39725ef9bb8d04c212404e15ae0c43b4fd4f27f55ccbba84cc4172c45e92f1b9e1b8e10f9ed9607b0440b5a7feae6d20b7dbb91606c05f8ab15b3a93d04dff7b68ad20bae9f4cd7ec463e356f00b2db0887dc57b09336ded74077df366714f8e7ab195bdd9c92c82ebda62888e52a162f44132932f329994b3c546cceb5302b5b4746fcc65f05794aaceb305d71051b7d5530041448c67593095fd0a4faa0896012d9a44a07f0baada19ca24d7bc07d56f3a6c7d0efe09fb82a9142313005960085438fe04b1d40e81f6a4ea9d4a12385ec6f7cf4a3162dfeb72fe8993166208f69edfa1321da218f50010d990c5830f9d310fc0905bb52a3b92fb06b662e84f7d8f7caa05b813d1fc5a993a83853b1dedcf89fdd8c06111222053a91cdcdc20619963f0318b3f59059eb5ea408a6145caea5c2777ca8705fcb90fce5183e25a2123fc9d2c3e032bdf375b728f6a1cc02b160b74f4f37c0462feb23d55b50d03afc1905645d9acc73f3a1ca75b930af788dc9630a674c6def3621fee43e44a05d2eec3376033365ab32167eb36a85c64020aeeb7c37cfb2a56a41ab06a90dac470a8b984706583b588bd65a9b59740f45f4a9480133064637db0e87fd4251fc692aea06817e74f42132a6feab1d6336a64d274ba362bdde0b5a0aabee6d1efeed5b7ed903b13957c86b7410a675e990b7236871297f8ac4514c25aa20741e8b9e27019b1f6825fe914a3c5d2f03136983e3cdd0d969b2c295be4097af906309a0ee803996a944338e4c389d4702c7b33becf088d0ac183ef941854733634e93da7748ee6a193b6e43489fe219c829b3590a132f656c359c144b94790e1cc575533890fc701f9b68e45b1136049996a0b52d6b6ec21ff5e7909b1fe7b394c4cebaf69eb340a06f0cb1ea8091d9db10502e08c04caf8bfbde8b6edb438393524c41223c4d8ab91fbc08d39fb0bbc974162423623c2b8dd53f8bc05b1cc1a0525bba5f5086d493fb3503ee03977d275871408c441d09bb17c02085af65a3db48ce8dfd49edaab8ec088ae69a681cf3889c442d6f8311da36dc61283c290b470f59b380d7a2791a3a2865fdfe7325e0e1658f44fee28b0ff7ee19229c7d8d349923eec763be1be6aaaae20ffcea6c40b3f8e6105b74dcacc732fabe24c1dead33472d29d703babacda79f0a4f1e539ba44876eb7341e4257bdf1773090b48384d219c40c4c38ae6995551bddf4cb161de94524bd86e888630bd8af995a303c25b9cba4b5c7e77861596318be9b3e059b9217d50b9163fe920ced842e775aa07f0c2625dd293008fceb9d1f116044a255f64fdb1e97b9cb28965dbe3f7751c1ca9af023d28c699c64a59232d9ac0d5f24fcae973b25aee20f1ea6b25dce7c5c1c7b5a02ccfca203d20c2f236f452c0299188ef2cd8b6257a6b8172dc91a1012a9fdfa6cfb5b6897a058f584782d7828f56454e5cd8d8e58f6062037475fbb577dd5a80795b70610ff42920c021378af07b4f6116131720d9c4a5f4ecabeb578b3fa14454e96f3606049f9e6ececb37c84dea7a859b0083357f2ef3b4b46f926217427f787692ba1a140d2953d0380e6ba1d1056a219e2d3da93f03a2558edd146b7f82d2756f07ccb9cef9b386dca5cb859779bad43d1a9fc51ed7b6c31d273efd8398b64f232f6b5774176825013dd3cb59cc858d47ff461bd305667a24110faab2ad8ebe699b381b7db0ed2a0c1ea2bd5ecc7dabead68fadeaf433155e659ac10ac18837030b5d3da3d4fbb7a6c2e611f5ce60696f562c0bac21dd8a87f62265e2bb2b7a536f35267455128d5d6a8530c3f3090be1346ea9915fa3544487d4eb00949ed3bd7ce0b46440070bf3131df91dd6d496652b78c024aec025d502c3bef93cab03bdd00cd24f9c9f54c8ded01783ceb3e80b396ce265c7da97da123711f16b4238042abd6de52cf227da4073d7a6976e6b0192b2083d2fc5c16d7ca78f809879184d84c7d88b3f009cc1cf811d518fee57521bdf0fa47d1e856579d912a2b150be8ee7e847541926d516a8db87646f0bf83348ab4a6ef710636d398af557aa8159082e98ab7d90e4b32b95efa3fcfe75ed36efdbe5a66756802dde7a4f67aa28ec2360fc25ef66ddf705a82ecc4e6b8a9e66fc3c1c05f6bc6161beb3a88453a10379ff14e5ed9d47d1c4ad45976394a4a71715e89b02585c87a96a142443011bcf95b77ec7dcbeea742a46d7afc48446f9c1ee7ecb2f8a2cfec1b4ead3994a96aec6924c4bc26ba322f5fea45cae26156129284b8e552c3e3055f37eafbe53846a71754eec3aad4ab21a59688c605e442b1d938b2f6159a2eded422dde682fe2dedc0186eb28fd40fd5c5de7e6e0a6bb903917497ddd77eafbe44d0f3261a6794d8d68107eae134be9cd2db7b38d384c5141b467174b08dd866788c01df6ece5aeb25d6ca873c2c75861c8eb5c0ab1cc2f7645d7c7af1fe6638040016f26df73e4f4f3a99aef69ee2335f95411c9127e5606c3260afda629fb1e4495b254f4aabdcdd243a0237e1bbdaf358a1d6519d0e8f2c01af7eb44077be2d447f834e2430e325f31665bff7258a64c1762f0c0ad0696255559bc0fd438e9c517d2614cbb5a051f2c22902b31d3b1a7c6d09209a405f4e2ade86d9fe63b1918649717c9a078c06e5ebfe367a98baadb343292b76f659ed02ed03bedf19f49ef4479110f31f1980e57ef7f785596010b4b4ba54cb6580a54c1bb99f9232600201cd1139baa796045f9991a6ccca3cac45482f1158e7486fa4a864688ab15fc043fb92edf60508c0f224c343d30a7d6eb5076a55557e731645599d8399424c519587bf473da09a44e1e6306bfaca833115d52ff0536c600d4035e07fdef439d1f1c06d319d0fd3def0a8a24147b40a3f9cc0a1160fcddf6691cb29743d178f72a3ad1b7f662e9179b6b8888dff72301d28844f6badf79fe0e44d7cda27fa037209b8f0d29acc077924b44c099f6d9e10881563dfbeb1246312b22195c9c938275504b24430d2df509d88b75a561bad86ebfc83bbc60b78eb90951083fff52e5bf0f7733be87051d1da80b9f26522bd6118f090d6808f3e006c987699c67274aebdee4864beb7cea569084174d1c1924a48ccaf728fcc391abc44eb5589d22a7496412e6757ffff9c5d67533814ac57f6480901762fa8df4072e83a5d71b1dfa04b9c896983423e8c84f8e972926e082acf03912a0041320fdcbebeae1ab90f53243bef96852b43e1142a16143e7ac7154c2993f2f7b12b1a5065592f1aad2d97407c2f7070faf3b631180756e9c4341d28635938425e93eef531aa87f4387630341af247a9fc47d97a93431bbd5b5a98b3254917b7fa393ad9d48eafa85152e86bad64ae8a9a8e499e15ea0250a3bd91c82c555053c0fee1001c3df8d11548f2066e4ba7ecaa316c02f65408a98959f0d220037e0b51d2a7277540b736f4be0ede3f055b8b20e130c3969a2ab6018df01cc70ee3a51e06f983efe240d782531894ba4949791cd31f05bb7a66ee4480ddb7c06da45eb1ed028a61253352084a4b3ed91af5964828c4be6adfc0b6d2c2935406f055ce03e78ba73d977ba4f2710af8e03d4bd1964591a86e658b785765559c544c487ecd9ae78a7993a1c69e3a0a11df178af8ff721d3e13a82c3a981be29eabd184eee4103810cf9ca0993515c9a4e7ab97d8dda274d5269ca552776a8b05630b45b30909880f5b122210f62c4b592056e7278bd929e27c16d563b290eea80dc4747c6a012014c889271ae016613ee4abbb7fe439b49988a93d6a0233707655daf89f8b8b16b97ed07c03adfb63a8c2f29e4b12cbf75c737ee024d4044624421fc40db084f3e3e42b63f4ef29e2f5cf0b3fb5856fa3823b4a385b84093e1517751055f20863b5163f795b1ca071d52bfb5514b082c78243548b550f69633cceaf9a84d549955d3503a6322a817f819d6bae0c9da85094e8b2693c363dbad6a853cd180bb002d593c3ef5da2cbfc96cabca4487e6af84fddb2a74d1d95821413564632d740e50679711ade1a38667f281455c62d709531f9412e0fa260e5cd3612abd80aec7f3393d4b75f62cb8fc6f5fa9171f7eb1eb22670519dd70c7975ed134e9953a529"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "12d32fe544109d76e133678b699c83f4e76405a9fd998dd85d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff00000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1200}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000300)=""/43, 0x2b) getdents(r4, 0xfffffffffffffffd, 0x58) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000007c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000ec0)={0x0, 0x0, r5, r7, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, "f617bf12f85ec608623fd5c9416ff7ab766cf1de733075a1def5082be47a6f4b"}}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x40, 0x6, 0x60, {0x60, 0x99d9f4a289048b6, "b79e5dfce9ae9f9287e0d544892059a41e42853e9232afba0b787ee90d79eeca4f2dacc8f0fa4eda50a8dde7f4b762b2c821a460bf3a98c950adec8e5b0b6d5a97a34974101650dc60de57be6312eff916a1ed88f1c361b0b02f2de30a1e"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="0003a6000000a603cbc2c81cafd0ad4d02d3d8fb0e68eac3fa51c1038aa0b31432b8c65c4a17ac6567fc866099db3981d1e324360fff140f1d3ed9f5c5790eae3c90cca79f1e159982f2cd0ce74aa7c529f976ad3d4d864f7ebbe0a14d9feff1816cc6276c18394a0fce6c8a62323787dcbcd1928f99904552e0450cd90e67e5c439f24039eb5136f998265eedd61a3c7ae2d51b074ab3bcdabdf0bb5e87bc6fc1b229a2fba50ebe421d1af3"], &(0x7f00000001c0)=ANY=[@ANYBLOB="002222002a4c399f9b080742000007245addcd83abcb893792af0f937023c6819313b42aa6828a31"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe777, 0x0, 0x1, {0x22, 0x694}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x13, 0x8d, "5b97380b6d5b14c0e376f60f13eb5f6a458bf5729c3ad582b36e4fab85084904550a37af836ef3d35dab3a33d940e7b6e22ff9c81370b90dccd897445190fbe50cee05876112b1d29d31a77b000301512829a22eebb2b93750adc11aef5ac267e7ce4f2948ae22ef32126ba915f031d638efd593a99f92ed629efa865455827f89deea96ad898a4cbc2ca83b20"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20010e0000004c124591fd529dc1cdf4cd666097"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1f}}) 1.555395245s ago: executing program 3 (id=4395): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x8}, 0x20) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x1016, &(0x7f00000008c0)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x3, 0x4, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ac0)=@generic={0x0, r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70c0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850012d6030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYBLOB="d008d74aed39d7d62e28186212635949a26fec6ddcfe2a3646c670fa61f7876b45a562045a081512c2ed0b173fde92cfa61392f933aa8798d53b15a08d3d24bb027c79459fa27765072cefc392dd559bb7e45645fb5c2a7dc2bb048621e18d95c5dc22828ca1d7c92daef2e2b0f4518659e533f26c9eb2e2d02ad594b73fa4135ecee3b57179461d62fb04c892f7281c3f4e0eddaff9a42b9e77a75aebb299f060ff6a490e2916197bbcecbcf10f4e575f3c62c6a40e9fde5a46379d452aef82b3dd0f8cb7f79b76541373b218f22b1359fb776682d057ed9c3661a8", @ANYRES8=r4, @ANYRES64=r8, @ANYRES32=r10, @ANYRESDEC, @ANYRESHEX=r8, @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.478528863s ago: executing program 4 (id=4396): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000040)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) bind$x25(r3, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x0, 0x0, @dev, @mcast1, [@fragment={0x3b}]}}}}}}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10005) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() syz_open_dev$MSR(&(0x7f0000000180), 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000001) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x2}]}}]}, 0x44}}, 0x0) 1.448659096s ago: executing program 3 (id=4397): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c7b4408070a64006e40010203030902310001a82300000904000002ca744d00090503034d", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x227e, &(0x7f0000000680)) r3 = open(0x0, 0x0, 0xb4) openat(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'veth1\x00', 0x4000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x200200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x840000000002, 0x3, 0xff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000001c0), 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x18) 1.372500274s ago: executing program 2 (id=4398): fanotify_init(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/3604], &(0x7f0000000380)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="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", 0x39d}], 0x1, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x100080c0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100009041000"/20, @ANYRES32=r9, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500010000000000"], 0x44}}, 0x0) 341.819939ms ago: executing program 2 (id=4399): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003871173b2c612704f8f8ef350a4828395b5504752c381d9924b899b546f1e84cb88dcfd666a0051a33cffdef0ee04c78e0b4f7336db0ed9c2c589bcea0893af03d505e8ea101d6c6410c402e0353956aec42cd7da081f753ab7f7057ff3d9f0bc67a9224c9c9b403c6cf639827531bc9588faf741b2fb972af481f33659d03228b04a913"], 0x24}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde4a}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000001e00)=""/4096}, 0x90) r2 = syz_open_pts(r0, 0x0) (async) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5a86f477512bbe340530685b8caa8e2eeff2aa"}) 222.000288ms ago: executing program 0 (id=4400): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}}, 0x18) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f000054e000/0x2000)=nil, 0x2000, 0x3000007, 0x38011, r4, 0xffffc000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 27.955276ms ago: executing program 2 (id=4401): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') pread64(r5, &(0x7f0000000140)=""/214, 0xd6, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) r6 = io_uring_setup(0x7684, &(0x7f0000000100)={0x0, 0x1, 0x800, 0x1, 0x20000001, 0x0, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000000), 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r8], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x27, 0x0, 0x0, 0x0, 0x0, 0x2104, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r12 = socket(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000140)='ipvlan1\x00', 0x10) bind$alg(r12, &(0x7f0000000000)={0xa, 'hash\x00', 0x2, 0x0, 'streebog512-generic\x00'}, 0x58) 0s ago: executing program 4 (id=4402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x10001}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x0, 0x4, 0x0, 0x14, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x56fc, 0x4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x3}, 0x10}, 0x90) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x2}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) kernel console output (not intermixed with test programs): [ 978.521360][T17878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.771968][T17878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.780467][T13150] Bluetooth: hci4: command tx timeout [ 978.898045][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.170162][T17878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.466436][T17878] hsr_slave_0: entered promiscuous mode [ 979.502369][T17878] hsr_slave_1: entered promiscuous mode [ 979.514255][T17951] netlink: 'syz.2.3887': attribute type 9 has an invalid length. [ 979.543360][T17878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.572243][T17878] Cannot create hsr debugfs directory [ 980.289559][ T5084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 980.306949][ T5084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 980.326007][ T5084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 980.349417][ T5084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 980.363873][ T5084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 980.375118][ T5084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 980.826500][ T5084] Bluetooth: hci4: command tx timeout [ 980.993590][T17960] lo speed is unknown, defaulting to 1000 [ 981.427635][T17878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.450230][ T5089] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 981.640644][ T5089] usb 3-1: device descriptor read/64, error -71 [ 981.885261][T17878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.933539][ T5089] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 982.121217][ T5089] usb 3-1: device descriptor read/64, error -71 [ 982.137517][T17878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.241880][ T5089] usb usb3-port1: attempt power cycle [ 982.313089][T17878] batman_adv: batadv3: Interface deactivated: netdevsim0 [ 982.416878][T17878] batman_adv: batadv3: Removing interface: netdevsim0 [ 982.428473][T17878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.524521][ T5084] Bluetooth: hci7: command tx timeout [ 982.696031][ T5089] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 982.831103][T17986] can0: slcan on ptm0. [ 982.860650][T17960] chnl_net:caif_netlink_parms(): no params data found [ 982.868285][ T5089] usb 3-1: device descriptor read/8, error -71 [ 982.902118][T17878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 982.928664][ T5084] Bluetooth: hci4: command tx timeout [ 983.015225][T17878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 983.132162][T17878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 983.150725][ T5089] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 983.192186][T17878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 983.203577][ T5089] usb 3-1: device descriptor read/8, error -71 [ 983.343035][ T5089] usb usb3-port1: unable to enumerate USB device [ 983.432423][T17960] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.454040][T17960] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.471858][T17960] bridge_slave_0: entered allmulticast mode [ 983.498540][T17960] bridge_slave_0: entered promiscuous mode [ 983.521457][T17960] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.542917][T17960] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.566798][T17960] bridge_slave_1: entered allmulticast mode [ 983.593661][T17960] bridge_slave_1: entered promiscuous mode [ 983.717841][T17983] can0 (unregistered): slcan off ptm0. [ 983.754275][T17960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.820181][T17960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.083593][T17960] team0: Port device team_slave_0 added [ 984.137320][T17960] team0: Port device team_slave_1 added [ 984.632538][ T5084] Bluetooth: hci7: command tx timeout [ 984.855819][T17960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.873351][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.975893][T17960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.024517][T17960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.049546][T17960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.080011][T17960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.197431][T17960] hsr_slave_0: entered promiscuous mode [ 985.222429][T17960] hsr_slave_1: entered promiscuous mode [ 985.232252][T17960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 985.248186][T17960] Cannot create hsr debugfs directory [ 985.513965][ T5133] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 985.786316][ T5133] usb 3-1: Using ep0 maxpacket: 32 [ 985.927601][ T5133] usb 3-1: config index 0 descriptor too short (expected 316, got 27) [ 985.966621][ T5133] usb 3-1: config 81 has too many interfaces: 123, using maximum allowed: 32 [ 986.020045][ T5133] usb 3-1: config 81 contains an unexpected descriptor of type 0x2, skipping [ 986.064317][ T5133] usb 3-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 986.129645][ T5133] usb 3-1: config 81 has 0 interfaces, different from the descriptor's value: 123 [ 986.175127][ T5133] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=7c.62 [ 986.244533][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.271011][ T5133] usb 3-1: Product: syz [ 986.275598][ T5133] usb 3-1: Manufacturer: syz [ 986.280239][ T5133] usb 3-1: SerialNumber: syz [ 986.526791][T17960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.625694][T17878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.652446][ T5133] usb 3-1: USB disconnect, device number 69 [ 986.795559][ T5084] Bluetooth: hci7: command tx timeout [ 986.804895][T17878] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.984753][T17960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.063450][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.070744][T13380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.353081][T17960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.455228][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.462492][T13380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.691241][T17960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.902305][T17878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 987.966437][T18019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.975089][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.248035][T17960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.295601][T17960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.315373][T17960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 988.337469][T17960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.495693][T17878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.638085][T17960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.726766][T17960] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.753034][ T5089] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 988.765640][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.772863][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.824398][ T5084] Bluetooth: hci7: command tx timeout [ 988.860189][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.867414][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.977661][ T5089] usb 3-1: Using ep0 maxpacket: 16 [ 989.017335][ T5089] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 989.035870][ T5089] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 989.086038][ T5089] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.130403][ T5089] usb 3-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 989.147215][ T5089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.169450][ T5089] usb 3-1: Product: syz [ 989.191279][ T5089] usb 3-1: Manufacturer: syz [ 989.195953][ T5089] usb 3-1: SerialNumber: syz [ 989.211593][ T5184] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 989.254887][ T5089] usb 3-1: config 0 descriptor?? [ 989.408281][ T5184] usb 2-1: Using ep0 maxpacket: 8 [ 989.426907][ T5184] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=c0.eb [ 989.447132][ T5184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.487738][ T5184] usb 2-1: Product: syz [ 989.496735][ T5184] usb 2-1: Manufacturer: syz [ 989.535192][T17878] veth0_vlan: entered promiscuous mode [ 989.577872][T13150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 989.591269][T13150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 989.601684][T13150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 989.611816][T13150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 989.621775][T13150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 989.629301][T13150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 989.789910][ T5184] usb 2-1: SerialNumber: syz [ 989.805224][ T5184] usb 2-1: config 0 descriptor?? [ 990.521143][T18047] kcapi: manufacturer command 38 unknown. [ 990.529792][T18047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.539264][T18047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.568023][ T30] audit: type=1326 audit(1719638578.885:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.651600][ T30] audit: type=1326 audit(1719638578.885:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.713520][T12820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.721982][ C0] hrtimer: interrupt took 67843 ns [ 990.732040][ T30] audit: type=1326 audit(1719638578.905:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.799908][ T30] audit: type=1326 audit(1719638578.915:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.857289][ T30] audit: type=1326 audit(1719638578.915:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.887012][T17878] veth1_vlan: entered promiscuous mode [ 990.901539][ T30] audit: type=1326 audit(1719638578.954:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.975098][ T30] audit: type=1326 audit(1719638578.954:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 990.981399][ T5184] usb 2-1: can't set first interface for hiFace device. [ 991.008962][ T30] audit: type=1326 audit(1719638578.954:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 991.018523][ T5184] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 991.058314][T12820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.061859][ T30] audit: type=1326 audit(1719638578.964:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 991.074264][ T5184] usb 2-1: USB disconnect, device number 62 [ 991.123530][T18045] lo speed is unknown, defaulting to 1000 [ 991.138946][ T30] audit: type=1326 audit(1719638578.974:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18027 comm="syz.2.3906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5791b75b99 code=0x7ffc0000 [ 991.262495][T12820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.321876][T17960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.432396][T17878] veth0_macvtap: entered promiscuous mode [ 991.498252][T17878] veth1_macvtap: entered promiscuous mode [ 991.546523][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.563380][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.574673][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.585287][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.596435][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.659650][ T5089] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 991.681748][ T5089] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 991.693027][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.719303][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.731255][ T5089] usb 3-1: USB disconnect, device number 70 [ 991.747985][T13150] Bluetooth: hci5: command tx timeout [ 991.768395][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.779136][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.790019][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.800030][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 991.813455][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.839543][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.862484][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.878842][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.890447][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.901034][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.911522][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 991.948515][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 991.977584][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.015023][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.059266][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.099624][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.115195][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.150142][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.172351][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.338049][T17878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.351554][T17878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.371825][T17878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.391981][T17878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.498701][T17960] veth0_vlan: entered promiscuous mode [ 992.578769][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.591660][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.600993][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.629108][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.641775][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 992.655201][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.747451][T17960] veth1_vlan: entered promiscuous mode [ 992.770136][T12820] bridge_slave_1: left allmulticast mode [ 992.778120][T12820] bridge_slave_1: left promiscuous mode [ 992.783979][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.827756][T12820] bridge_slave_0: left allmulticast mode [ 992.833527][T12820] bridge_slave_0: left promiscuous mode [ 992.845521][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.589579][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.596424][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.893122][ T5084] Bluetooth: hci5: command tx timeout [ 994.749473][ T5084] Bluetooth: hci0: command tx timeout [ 994.805634][T12820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.820309][T12820] bond_slave_0: left promiscuous mode [ 994.852525][T12820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.874015][T12820] bond_slave_1: left promiscuous mode [ 994.886702][T12820] bond0 (unregistering): Released all slaves [ 995.253006][T18057] lo speed is unknown, defaulting to 1000 [ 995.253949][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.288693][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.574512][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.614951][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.674892][T17960] veth0_macvtap: entered promiscuous mode [ 995.809351][T18045] chnl_net:caif_netlink_parms(): no params data found [ 995.875780][T17960] veth1_macvtap: entered promiscuous mode [ 995.917635][ T5084] Bluetooth: hci5: command tx timeout [ 995.926774][T18083] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 995.967128][T12820] hsr_slave_0: left promiscuous mode [ 995.988975][T12820] hsr_slave_1: left promiscuous mode [ 995.999275][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.007036][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.016457][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.028107][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.070313][T12820] veth1_macvtap: left promiscuous mode [ 996.076125][T12820] veth0_macvtap: left promiscuous mode [ 996.083140][T12820] veth1_vlan: left promiscuous mode [ 996.091213][T12820] veth0_vlan: left promiscuous mode [ 996.813408][ T5084] Bluetooth: hci0: command tx timeout [ 997.046852][T12820] team0 (unregistering): Port device team_slave_1 removed [ 997.134797][T12820] team0 (unregistering): Port device team_slave_0 removed [ 998.010803][ T5084] Bluetooth: hci5: command tx timeout [ 998.118616][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.214137][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.242238][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.254732][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.264942][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.275712][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.285729][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.296872][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.306879][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.335232][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.965261][ T5084] Bluetooth: hci0: command tx timeout [ 999.152819][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.178605][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.204069][T17960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.427936][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.468809][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.478862][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.499919][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.520293][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.541773][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.560294][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.590911][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.610589][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.640784][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.656696][T17960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.677757][T17960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.715890][T17960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.973925][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.993304][T18045] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.000714][T18045] bridge_slave_0: entered allmulticast mode [ 1000.030920][T18045] bridge_slave_0: entered promiscuous mode [ 1000.045834][T17960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.055878][T17960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.066077][T17960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.075669][T17960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.112245][T18045] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.124261][T18045] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.167485][T18045] bridge_slave_1: entered allmulticast mode [ 1000.175981][T18045] bridge_slave_1: entered promiscuous mode [ 1000.273367][T18057] chnl_net:caif_netlink_parms(): no params data found [ 1000.302868][T18045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.339953][T18045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.429135][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1000.429156][ T30] audit: type=1400 audit(1719638589.302:1022): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18119 comm="syz.4.3930" daddr=::1c9a:e7ff:fe9a:6f34 [ 1000.601513][T18045] team0: Port device team_slave_0 added [ 1000.659677][T18045] team0: Port device team_slave_1 added [ 1000.674926][T12820] IPVS: stop unused estimator thread 0... [ 1000.905625][T18057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.923577][T18057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.947568][T18057] bridge_slave_0: entered allmulticast mode [ 1000.956341][T18057] bridge_slave_0: entered promiscuous mode [ 1000.990188][ T5084] Bluetooth: hci0: command tx timeout [ 1001.047058][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.077970][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.139120][T18045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.146618][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.175771][T18045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.198709][T18057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.211429][T18057] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.219210][T18057] bridge_slave_1: entered allmulticast mode [ 1001.227786][T18057] bridge_slave_1: entered promiscuous mode [ 1001.307579][T18045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.317813][T18045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.397691][T18045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.485260][T18057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.599133][T18057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.647145][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.657660][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.741866][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1001.754846][ T5084] Bluetooth: Unexpected continuation frame (len 45) [ 1001.778679][ T30] audit: type=1107 audit(1719638590.644:1023): pid=18142 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1001.826512][T18057] team0: Port device team_slave_0 added [ 1001.838093][T18057] team0: Port device team_slave_1 added [ 1001.949712][T12820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.009188][T18045] hsr_slave_0: entered promiscuous mode [ 1002.049352][T18045] hsr_slave_1: entered promiscuous mode [ 1002.068458][T18045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.076903][T18045] Cannot create hsr debugfs directory [ 1002.539171][T12820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.689028][T18057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.703811][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.770437][T18057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.805663][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 1003.823120][T18057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.832398][T18057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.864732][T18057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.013241][T12820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.611964][T12820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.869990][ T30] audit: type=1326 audit(1719638593.678:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18177 comm="syz.4.3949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99e3775b99 code=0x0 [ 1005.675392][T18180] can0: slcan on ptm0. [ 1005.724752][T18057] hsr_slave_0: entered promiscuous mode [ 1005.773998][T18057] hsr_slave_1: entered promiscuous mode [ 1005.807677][T18057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.824391][T18057] Cannot create hsr debugfs directory [ 1006.046403][T18174] can0 (unregistered): slcan off ptm0. [ 1006.106400][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1006.181984][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 1006.427940][ T5184] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1006.459520][ T25] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1006.478304][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1006.506678][T12820] bridge_slave_1: left allmulticast mode [ 1006.519337][T12820] bridge_slave_1: left promiscuous mode [ 1006.526304][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.537602][T12820] bridge_slave_0: left allmulticast mode [ 1006.544252][T12820] bridge_slave_0: left promiscuous mode [ 1006.556865][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.623813][ T5184] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1006.634837][ T5184] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1006.652512][ T5184] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.655999][ T25] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1006.661834][ T5184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1006.690078][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.692212][ T5184] usb 5-1: SerialNumber: syz [ 1006.708771][ T25] usb 2-1: Product: syz [ 1006.717135][ T25] usb 2-1: Manufacturer: syz [ 1006.725306][ T5184] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1006.736557][ T25] usb 2-1: SerialNumber: syz [ 1006.745086][ T25] usb 2-1: config 0 descriptor?? [ 1006.999424][ T5184] usb 2-1: USB disconnect, device number 63 [ 1007.080310][ T5133] usb 5-1: USB disconnect, device number 61 [ 1007.313615][T12820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.328298][T12820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.344599][T12820] bond0 (unregistering): Released all slaves [ 1007.796564][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1009.292118][T12820] hsr_slave_0: left promiscuous mode [ 1009.331497][T12820] hsr_slave_1: left promiscuous mode [ 1009.339106][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.369884][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.386731][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.398377][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.411847][ T30] audit: type=1400 audit(1719638598.246:1025): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18228 comm="syz.4.3961" daddr=fc00::1 dest=20004 [ 1009.485321][T12820] veth1_macvtap: left promiscuous mode [ 1009.490930][T12820] veth0_macvtap: left promiscuous mode [ 1009.522302][T12820] veth1_vlan: left promiscuous mode [ 1009.527818][T12820] veth0_vlan: left promiscuous mode [ 1009.703269][ T5133] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1009.906561][ T5133] usb 5-1: Using ep0 maxpacket: 8 [ 1009.947872][ T5133] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=c2.2c [ 1009.967318][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.998525][ T5133] usb 5-1: Product: syz [ 1010.017791][ T5133] usb 5-1: Manufacturer: syz [ 1010.027814][ T5133] usb 5-1: SerialNumber: syz [ 1010.059573][ T5133] usb 5-1: config 0 descriptor?? [ 1010.077086][ T5133] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1010.250587][T18232] slcan: can't register candev [ 1010.255784][T18232] Falling back ldisc for ptm0. [ 1010.299951][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.319320][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.353888][T13150] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 1010.374672][T18229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.399579][T18229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.573116][T18236] Bluetooth: MGMT ver 1.22 [ 1011.152559][T12820] team0 (unregistering): Port device team_slave_1 removed [ 1011.229702][T12820] team0 (unregistering): Port device team_slave_0 removed [ 1011.858211][T18229] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1011.896465][ T5133] usb 5-1: USB disconnect, device number 62 [ 1012.133967][T18045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1012.175120][T18045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1012.220443][T18045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1012.240679][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1012.282133][T18244] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1012.305385][T18045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1012.353254][T18247] batman_adv: batadv4: Adding interface: netdevsim0 [ 1012.363120][T18247] batman_adv: batadv4: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.391661][T18247] batman_adv: batadv4: Interface activated: netdevsim0 [ 1012.479090][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1012.638440][T18057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1012.849859][T18057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.024051][T18057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1013.393360][T18057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.057433][T18045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.145868][T18057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.186600][T18045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.250921][ T9353] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1014.265939][T18057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.308785][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.316060][T13380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.342454][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.349644][T13380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.370568][T18267] sctp: [Deprecated]: syz.1.3976 (pid 18267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.370568][T18267] Use struct sctp_sack_info instead [ 1014.394188][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.401422][T13380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.422195][ T9353] usb 5-1: device descriptor read/64, error -71 [ 1014.426285][T13150] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1014.437829][T13150] Bluetooth: hci4: Injecting HCI hardware error event [ 1014.448618][T13150] Bluetooth: hci4: hardware error 0x00 [ 1014.492967][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.500168][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.585192][T18269] sctp: [Deprecated]: syz.1.3976 (pid 18269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.585192][T18269] Use struct sctp_sack_info instead [ 1014.723348][ T9353] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1014.791336][T18057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1014.903832][ T9353] usb 5-1: device descriptor read/64, error -71 [ 1015.035267][ T9353] usb usb5-port1: attempt power cycle [ 1015.105913][T18289] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 1015.219819][T18045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.352127][T18057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.485960][ T9353] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1015.520630][T18045] veth0_vlan: entered promiscuous mode [ 1015.546999][ T9353] usb 5-1: device descriptor read/8, error -71 [ 1015.664406][T18045] veth1_vlan: entered promiscuous mode [ 1015.785302][T18045] veth0_macvtap: entered promiscuous mode [ 1015.801568][T18045] veth1_macvtap: entered promiscuous mode [ 1015.824093][T18057] veth0_vlan: entered promiscuous mode [ 1015.830526][ T9353] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1015.865332][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.898429][ T9353] usb 5-1: device descriptor read/8, error -71 [ 1015.920070][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.940325][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.968091][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.987057][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.010934][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.019080][ T9353] usb usb5-port1: unable to enumerate USB device [ 1016.032897][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.052225][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.075254][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.086676][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.099354][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.113053][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.140212][T18045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.197305][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1016.209042][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.222040][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.235538][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.260681][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.271269][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.291553][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.302782][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.313461][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.324411][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.335125][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.349202][T18045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.361456][T18045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.373738][T18045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.390474][T18057] veth1_vlan: entered promiscuous mode [ 1016.413814][T18045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.434136][T18045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.452718][T18045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.467866][T18045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.500807][T13150] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1016.664748][T18057] veth0_macvtap: entered promiscuous mode [ 1016.703780][T18057] veth1_macvtap: entered promiscuous mode [ 1016.845254][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.874815][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.885002][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.895922][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.906524][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.918239][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.928199][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.938872][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.948795][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.978542][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.989754][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.008223][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.030257][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1017.047143][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.067232][T18057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.095230][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.112908][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.171107][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.199603][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.210414][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.226478][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.236528][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.247645][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.257857][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.272263][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.289178][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.306962][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.329954][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.349258][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.367454][T18057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.392348][T18057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.404791][T18057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.450651][T18057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.460478][T18057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.493828][T18057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.518648][T18057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.538299][T18313] afs: Unknown parameter 'smackfsrootexit' [ 1017.651364][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.659672][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.069318][ T30] audit: type=1800 audit(1719638606.743:1026): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3986" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 1018.712613][T12820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.778494][T12820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.892713][ T30] audit: type=1400 audit(1719638607.690:1027): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18330 comm="syz.0.3990" dest=6 [ 1018.916393][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.946618][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.050525][T18327] can0: slcan on ptm0. [ 1019.484400][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3994'. [ 1019.500474][T18320] can0 (unregistered): slcan off ptm0. [ 1019.677004][T18352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.689427][T18352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.949602][ T9389] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1020.034670][T18357] netlink: 'syz.0.3997': attribute type 5 has an invalid length. [ 1020.934834][T18354] kcapi: manufacturer command 38 unknown. [ 1020.941996][T18354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.951870][T18354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.954504][ T30] audit: type=1326 audit(1719638608.896:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.024057][ T30] audit: type=1326 audit(1719638608.896:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.061499][ T9389] usb 5-1: Using ep0 maxpacket: 8 [ 1021.096871][ T30] audit: type=1326 audit(1719638608.896:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.105935][ T9389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1021.172743][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1021.181479][ T30] audit: type=1326 audit(1719638608.896:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.205949][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1021.205989][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1021.207738][ T9389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1021.221197][ T30] audit: type=1326 audit(1719638608.896:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.258462][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1021.333822][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1021.360415][ T30] audit: type=1326 audit(1719638608.896:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.363275][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1021.436963][ T9389] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1021.438166][ T30] audit: type=1326 audit(1719638608.906:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.446487][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1021.496517][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1021.524845][ T9389] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1021.557424][ T30] audit: type=1326 audit(1719638608.906:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18351 comm="syz.3.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1021.563262][ T9389] usb 5-1: string descriptor 0 read error: -22 [ 1021.603144][ T9389] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1021.621556][ T9389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.661277][ T9389] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1022.125712][ T9389] usb 5-1: USB disconnect, device number 67 [ 1023.110511][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1023.147257][T18398] bridge0: port 3(netdevsim0) entered blocking state [ 1023.166654][T18398] bridge0: port 3(netdevsim0) entered disabled state [ 1023.184436][T18398] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1023.209398][T18398] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1023.252480][T18398] bridge0: port 3(netdevsim0) entered blocking state [ 1023.259984][T18398] bridge0: port 3(netdevsim0) entered forwarding state [ 1023.525730][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1023.525752][ T30] audit: type=1400 audit(1719638612.306:1047): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18406 comm="syz.0.4013" [ 1023.593292][ T30] audit: type=1400 audit(1719638612.335:1048): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18406 comm="syz.0.4013" dest=6 [ 1023.642846][ T30] audit: type=1400 audit(1719638612.335:1049): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="subj_type" object="_" requested=w pid=18409 comm="syz.2.4014" saddr=fe80::aa daddr=fe80::aa dest=20002 netif=wpan0 [ 1024.191493][T18421] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1024.249252][T18421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1024.344222][ T45] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1024.398295][ T30] audit: type=1326 audit(1719638613.153:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.504356][ T30] audit: type=1326 audit(1719638613.153:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.584408][ T30] audit: type=1326 audit(1719638613.163:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.623927][ T45] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=42.f5 [ 1024.643476][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.663993][ T45] usb 5-1: Product: syz [ 1024.669069][ T30] audit: type=1326 audit(1719638613.163:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.691730][ T45] usb 5-1: Manufacturer: syz [ 1024.701912][ T45] usb 5-1: SerialNumber: syz [ 1024.716061][ T45] usb 5-1: config 0 descriptor?? [ 1024.732894][ T30] audit: type=1326 audit(1719638613.163:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.766630][ T45] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1024.785372][ T45] earthmate ttyUSB0: required endpoint is missing [ 1024.811566][ T30] audit: type=1326 audit(1719638613.203:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.852656][ T30] audit: type=1326 audit(1719638613.203:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18424 comm="syz.1.4020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1024.982561][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.999383][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.194519][T13812] usb 5-1: USB disconnect, device number 68 [ 1025.201555][T13812] cypress_m8 5-1:0.0: device disconnected [ 1025.247814][T18448] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1026.743257][T18475] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4031'. [ 1026.971442][T18475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.508535][T18496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.136984][T18517] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1029.150271][T18517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.248962][ T5089] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1029.447164][ T5089] usb 3-1: Using ep0 maxpacket: 32 [ 1029.500799][T18526] lo speed is unknown, defaulting to 1000 [ 1030.304121][ T5089] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1030.314730][ T5089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.323922][ T5089] usb 3-1: Product: syz [ 1030.329423][ T5089] usb 3-1: Manufacturer: syz [ 1030.334065][ T5089] usb 3-1: SerialNumber: syz [ 1030.341427][ T5089] usb 3-1: config 0 descriptor?? [ 1030.428154][T18530] xt_TCPMSS: Only works on TCP SYN packets [ 1030.500535][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1030.500556][ T30] audit: type=1800 audit(1719638619.268:1089): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4050" name="bus" dev="sda1" ino=2009 res=0 errno=0 [ 1030.556070][ T5089] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 1030.579765][ T5089] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 1030.599815][ T5089] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1030.631731][ T5089] usb 3-1: USB disconnect, device number 71 [ 1032.249707][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.311472][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.388684][T18553] can0: slcan on ptm0. [ 1033.591244][T18561] kcapi: manufacturer command 38 unknown. [ 1033.611195][T18561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.620208][T18561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.628555][ T30] audit: type=1326 audit(1719638621.443:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.703976][ T30] audit: type=1326 audit(1719638621.453:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.767121][ T30] audit: type=1326 audit(1719638621.453:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.849416][ T30] audit: type=1326 audit(1719638621.453:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.894526][ T30] audit: type=1326 audit(1719638621.453:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.951600][ T30] audit: type=1326 audit(1719638621.463:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1033.988300][T18547] can0 (unregistered): slcan off ptm0. [ 1034.009553][ T30] audit: type=1326 audit(1719638621.463:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1034.032651][ T30] audit: type=1326 audit(1719638621.463:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1034.057276][ T30] audit: type=1326 audit(1719638621.463:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18552 comm="syz.3.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6b5775b99 code=0x7ffc0000 [ 1034.206613][T18573] binder: 18572:18573 ioctl c0306201 20000080 returned -14 [ 1034.222138][T18573] binder: 18572:18573 ioctl 8933 20000340 returned -22 [ 1034.231608][T18573] binder: 18572:18573 ioctl 4008f50a 0 returned -22 [ 1034.269867][T13348] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1034.665660][T13348] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.881076][T13348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.074739][T13348] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.442405][T13348] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.463336][T13348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.477354][T13348] usb 5-1: Product: syz [ 1035.482042][T13348] usb 5-1: Manufacturer: syz [ 1035.486680][T13348] usb 5-1: SerialNumber: syz [ 1035.514016][T18582] lo speed is unknown, defaulting to 1000 [ 1035.526052][T13348] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 1035.543843][T13348] cdc_ncm 5-1:1.0: bind() failure [ 1035.742738][T18594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.770815][T18594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.874606][ T45] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1038.084826][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1038.141409][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1038.202773][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1038.267557][T18616] binder: 18615:18616 ioctl c0306201 20000080 returned -14 [ 1038.297409][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1038.318979][T13380] usb 5-1: USB disconnect, device number 69 [ 1038.347677][T18616] binder: 18615:18616 ioctl 8933 20000340 returned -22 [ 1038.379850][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1038.419171][T18616] binder: 18615:18616 ioctl 4008f50a 0 returned -22 [ 1038.466113][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1038.496935][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1038.556156][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1038.598909][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1038.635612][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1038.653147][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1038.680778][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1038.696297][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1038.703086][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1039.345484][ T45] usb 3-1: string descriptor 0 read error: -22 [ 1039.379239][ T45] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1039.656086][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.686586][ T45] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1039.918178][ T9353] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1040.089342][ T9353] usb 5-1: device descriptor read/64, error -71 [ 1040.161894][T18647] lo speed is unknown, defaulting to 1000 [ 1040.204968][T13380] usb 3-1: USB disconnect, device number 72 [ 1040.378799][ T9353] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1040.581838][ T9353] usb 5-1: device descriptor read/64, error -71 [ 1040.722921][T18657] binder: 18656:18657 ioctl c0306201 20000080 returned -14 [ 1040.741527][ T9353] usb usb5-port1: attempt power cycle [ 1040.745259][T18657] binder: 18656:18657 ioctl 8933 20000340 returned -22 [ 1040.792765][T18657] binder: 18656:18657 ioctl 4008f50a 0 returned -22 [ 1041.160285][ T9353] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1041.692046][ T9353] usb 5-1: device descriptor read/8, error -71 [ 1041.878407][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1042.022092][ T9353] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1042.262041][ T9353] usb 5-1: device not accepting address 73, error -71 [ 1042.297634][ T9353] usb usb5-port1: unable to enumerate USB device [ 1042.810953][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1042.810975][ T30] audit: type=1400 audit(1719638631.535:1128): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18691 comm="syz.4.4100" daddr=fc00::1 dest=20004 [ 1043.193399][T13380] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1043.394843][T13380] usb 5-1: Using ep0 maxpacket: 8 [ 1043.423377][T13380] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=c2.2c [ 1043.464947][T13380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.036352][T13380] usb 5-1: Product: syz [ 1044.043329][T13380] usb 5-1: Manufacturer: syz [ 1044.051486][T13380] usb 5-1: SerialNumber: syz [ 1044.074893][T13380] usb 5-1: config 0 descriptor?? [ 1044.108429][T13380] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1044.341513][T18703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.472649][T18703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.802437][T18692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.636155][T18692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.782567][T18692] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1046.823700][T13380] usb 5-1: USB disconnect, device number 74 [ 1047.136731][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'. [ 1047.349919][T18735] lo speed is unknown, defaulting to 1000 [ 1048.683582][T18745] binder: 18744:18745 ioctl c0306201 20000080 returned -14 [ 1048.726519][T18745] binder: 18744:18745 ioctl 8933 20000340 returned -22 [ 1048.748529][ T9353] IPVS: starting estimator thread 0... [ 1048.756531][T18745] binder: 18744:18745 ioctl 4008f50a 0 returned -22 [ 1048.862636][T18753] IPVS: using max 15 ests per chain, 36000 per kthread [ 1049.715968][T18268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1049.736166][T18268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1049.745484][T18268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1049.765859][T18268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1049.775639][T18268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1049.784697][T18268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1049.956291][ T5089] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1049.982068][ T82] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.197652][ T5089] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=42.f5 [ 1050.244726][ T5089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.280128][ T5089] usb 2-1: Product: syz [ 1050.301751][T18776] lo speed is unknown, defaulting to 1000 [ 1050.312059][ T5089] usb 2-1: Manufacturer: syz [ 1050.322510][ T5089] usb 2-1: SerialNumber: syz [ 1050.768493][ T82] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.004533][T18795] binder: 18794:18795 ioctl c0306201 20000080 returned -14 [ 1051.064787][T18795] binder: 18794:18795 ioctl 8933 20000340 returned -22 [ 1051.089734][T18795] binder: 18794:18795 ioctl 4008f50a 0 returned -22 [ 1051.166583][ T5089] usb 2-1: config 0 descriptor?? [ 1051.179725][ T5089] cypress_m8 2-1:0.0: DeLorme Earthmate USB converter detected [ 1051.192883][ T5089] earthmate ttyUSB0: required endpoint is missing [ 1051.292694][ T82] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.417369][ T82] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.583240][T18268] Bluetooth: hci7: unexpected event 0x06 length: 4 > 3 [ 1051.629301][T18771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.728054][T18771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.818920][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 1051.848673][T18802] xt_hashlimit: invalid rate [ 1051.858865][T18268] Bluetooth: hci4: command tx timeout [ 1052.041308][ T45] usb 2-1: USB disconnect, device number 64 [ 1052.064754][ T45] cypress_m8 2-1:0.0: device disconnected [ 1052.134266][ T82] bridge_slave_1: left allmulticast mode [ 1052.148514][ T82] bridge_slave_1: left promiscuous mode [ 1052.154375][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.177010][ T82] bridge_slave_0: left allmulticast mode [ 1052.182764][ T82] bridge_slave_0: left promiscuous mode [ 1052.189108][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.967263][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.990360][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.004001][ T82] bond0 (unregistering): Released all slaves [ 1053.481971][T18776] chnl_net:caif_netlink_parms(): no params data found [ 1053.938239][T18268] Bluetooth: hci4: command tx timeout [ 1054.539170][ T5089] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 1054.564272][T18776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.603843][T18776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.624148][T18776] bridge_slave_0: entered allmulticast mode [ 1054.645424][T18776] bridge_slave_0: entered promiscuous mode [ 1054.684082][T18776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.694158][T18776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.702576][T18776] bridge_slave_1: entered allmulticast mode [ 1054.711917][T18776] bridge_slave_1: entered promiscuous mode [ 1054.728164][ T5089] usb 3-1: device descriptor read/64, error -71 [ 1054.759150][ T82] hsr_slave_0: left promiscuous mode [ 1054.774879][ T82] hsr_slave_1: left promiscuous mode [ 1054.795354][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.812574][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.841684][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.863241][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.942903][ T82] veth1_macvtap: left promiscuous mode [ 1054.956444][ T82] veth0_macvtap: left promiscuous mode [ 1054.970373][ T82] veth1_vlan: left promiscuous mode [ 1054.977790][ T82] veth0_vlan: left promiscuous mode [ 1055.018468][ T5089] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1055.178469][ T5089] usb 3-1: device descriptor read/64, error -71 [ 1055.223130][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.229827][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.309054][ T5089] usb usb3-port1: attempt power cycle [ 1055.637348][ T30] audit: type=1400 audit(1719638644.348:1129): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18855 comm="syz.0.4149" daddr=fc02:: [ 1055.655226][ T30] audit: type=1400 audit(1719638644.348:1130): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18855 comm="syz.0.4149" daddr=2001::1 [ 1055.729111][ T5089] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 1055.737326][ T30] audit: type=1400 audit(1719638644.458:1131): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18857 comm="syz.3.4150" daddr=fc00::1 dest=20004 [ 1055.738590][T18858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.771358][T18858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.791068][T18858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.801492][ T5089] usb 3-1: device descriptor read/8, error -71 [ 1055.807975][T18858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.033316][T13150] Bluetooth: hci4: command tx timeout [ 1056.077927][ T5089] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1056.132385][ T5089] usb 3-1: device descriptor read/8, error -71 [ 1056.266669][ T5089] usb usb3-port1: unable to enumerate USB device [ 1056.308609][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1056.374512][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1057.172775][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'. [ 1057.207195][T18850] bridge4: entered promiscuous mode [ 1057.215498][T18858] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1057.288893][T18776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.301184][T13150] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.361629][T18776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.509425][T18776] team0: Port device team_slave_0 added [ 1057.535043][T18776] team0: Port device team_slave_1 added [ 1057.649054][T18776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.678290][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.731470][T18776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.923584][T18776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.954057][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.912061][T18268] Bluetooth: hci4: command tx timeout [ 1059.087623][T18776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.141175][ T82] IPVS: stop unused estimator thread 0... [ 1059.173743][ T30] audit: type=1400 audit(1719638647.895:1132): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="subj_type" object="_" requested=w pid=18879 comm="syz.0.4157" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1059.229666][ T30] audit: type=1400 audit(1719638647.925:1133): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="subj_type" object="_" requested=w pid=18879 comm="syz.0.4157" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1059.487179][T18878] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1059.594677][T18885] binder: 18881:18885 ioctl 4018620d 0 returned -22 [ 1059.689939][T18776] hsr_slave_0: entered promiscuous mode [ 1059.843624][T18776] hsr_slave_1: entered promiscuous mode [ 1059.866468][T18268] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1059.875907][T18268] Bluetooth: hci5: Injecting HCI hardware error event [ 1059.888643][T18268] Bluetooth: hci5: hardware error 0x00 [ 1060.912778][T18776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1060.935333][T18776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1060.967712][T18776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1061.034854][T18776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1061.192189][T18776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.196946][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.207494][ T30] audit: type=1400 audit(1719638649.903:1134): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18901 comm="syz.3.4165" daddr=fc00::1 dest=20004 [ 1061.210376][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.284960][T13150] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 1061.291123][T18776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.302860][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.315323][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.388158][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.395420][ T9389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.424916][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.432073][ T9389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.496664][T18902] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1061.869213][T18776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.944789][T18268] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1063.182543][T18776] veth0_vlan: entered promiscuous mode [ 1063.239313][T18776] veth1_vlan: entered promiscuous mode [ 1063.355137][T13348] IPVS: starting estimator thread 0... [ 1063.373281][T18776] veth0_macvtap: entered promiscuous mode [ 1063.422536][T18776] veth1_macvtap: entered promiscuous mode [ 1063.465655][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.476728][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.486460][T18933] IPVS: using max 16 ests per chain, 38400 per kthread [ 1063.487886][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.504172][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.514184][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.525142][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.535209][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.557590][T18936] binder: 18926:18936 ioctl 4018620d 0 returned -22 [ 1063.588754][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.677431][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.801038][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.945215][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.080213][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.118065][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.151627][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.199572][T18776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.250929][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.306905][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.317196][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.328089][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.344172][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.367904][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.381789][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.395380][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.405951][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.443604][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.471052][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.495670][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.520259][T18776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.540491][T18776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.566198][T18776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.620701][T18776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.653491][T18776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.666553][T18776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.675993][T18776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.826814][T18948] wg2: entered promiscuous mode [ 1064.835487][T18948] wg2: entered allmulticast mode [ 1064.871302][ T30] audit: type=1400 audit(1719638653.590:1135): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=18949 comm="syz.0.4176" daddr=fc00::1 dest=20004 [ 1064.921670][T12821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.940742][T12821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.056535][ T2444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.069258][ T2444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.369292][ T30] audit: type=1400 audit(1719638654.080:1136): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="subj_type" object="_" requested=w pid=18959 comm="syz.1.4177" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1065.392781][ T30] audit: type=1400 audit(1719638654.110:1137): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="subj_type" object="_" requested=w pid=18959 comm="syz.1.4177" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1065.557589][ T25] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1065.998266][ T30] audit: type=1800 audit(1719638654.689:1138): pid=18965 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.4178" name="file0" dev="sda1" ino=2014 res=0 errno=0 [ 1066.359408][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1066.369255][ T25] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1066.378701][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.386747][ T25] usb 5-1: Product: syz [ 1066.391498][ T9389] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1066.399171][ T25] usb 5-1: Manufacturer: syz [ 1066.403798][ T25] usb 5-1: SerialNumber: syz [ 1066.424898][ T25] usb 5-1: config 0 descriptor?? [ 1066.669459][ T9389] usb 2-1: Using ep0 maxpacket: 8 [ 1066.676981][ T9389] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.690578][ T25] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1066.708404][ T25] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1066.715087][ T9389] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.729788][ T25] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1066.768511][ T9389] usb 2-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice= e.68 [ 1066.785264][ T25] usb 5-1: USB disconnect, device number 75 [ 1066.791386][ T9389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.830482][ T9389] usb 2-1: Product: syz [ 1066.834739][ T9389] usb 2-1: Manufacturer: syz [ 1066.848799][ T9389] usb 2-1: SerialNumber: syz [ 1066.859818][ T9389] usb 2-1: config 0 descriptor?? [ 1066.880257][ T9389] qmi_wwan 2-1:0.0: bogus CDC Union: master=128, slave=0 [ 1066.887532][ T9389] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1067.195638][ T9353] usb 2-1: USB disconnect, device number 65 [ 1068.171100][T13150] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1068.185691][T13150] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1068.194293][T13150] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1068.207362][T13150] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1068.316951][T13150] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1068.324992][T13150] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1068.597017][T18988] binder: 18978:18988 ioctl 4018620d 0 returned -22 [ 1069.151091][T18979] lo speed is unknown, defaulting to 1000 [ 1069.826169][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1069.842976][T19012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.863360][T19012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.907655][T19007] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1070.089344][T19014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1070.788891][T18268] Bluetooth: hci8: command tx timeout [ 1071.331702][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1071.395572][T19026] binder: 19020:19026 ioctl 4018620d 0 returned -22 [ 1071.559887][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1071.633358][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1071.765930][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1072.105970][T18979] chnl_net:caif_netlink_parms(): no params data found [ 1072.166258][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1072.174741][ T25] usb 2-1: SerialNumber: syz [ 1072.187003][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1072.303546][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1072.331271][T19036] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1072.433325][T19036] batman_adv: batadv1: Adding interface: netdevsim0 [ 1072.464602][T19036] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.465546][T13380] usb 2-1: USB disconnect, device number 66 [ 1072.534846][T19036] batman_adv: batadv1: Interface activated: netdevsim0 [ 1072.579094][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.595101][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.615791][T18979] bridge_slave_0: entered allmulticast mode [ 1072.632578][T18979] bridge_slave_0: entered promiscuous mode [ 1072.652556][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.673683][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.684308][T18979] bridge_slave_1: entered allmulticast mode [ 1072.694260][T18979] bridge_slave_1: entered promiscuous mode [ 1072.806046][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.832835][T18268] Bluetooth: hci8: command tx timeout [ 1072.926924][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.963214][T19049] wg2: entered promiscuous mode [ 1072.968230][T19049] wg2: entered allmulticast mode [ 1073.141629][T18979] team0: Port device team_slave_0 added [ 1073.196201][T18979] team0: Port device team_slave_1 added [ 1073.435238][T19060] can0: slcan on ptm0. [ 1073.509716][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.544847][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.586984][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.616095][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.654810][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.797168][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.165433][T18979] hsr_slave_0: entered promiscuous mode [ 1074.180979][T18979] hsr_slave_1: entered promiscuous mode [ 1074.187852][T19053] can0 (unregistered): slcan off ptm0. [ 1074.208088][T18979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.233239][T18979] Cannot create hsr debugfs directory [ 1074.388742][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1074.439365][T19093] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1074.457229][T19098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1074.484538][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.533265][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.768678][T18979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.853961][ T25] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1074.914412][T18268] Bluetooth: hci8: command tx timeout [ 1074.944692][T18979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.984391][T19112] wg2: left promiscuous mode [ 1074.991590][T19112] wg2: left allmulticast mode [ 1075.054978][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1075.067710][ T25] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1075.084151][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.092266][ T25] usb 5-1: Product: syz [ 1075.097360][T18979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.109205][ T25] usb 5-1: Manufacturer: syz [ 1075.113922][ T25] usb 5-1: SerialNumber: syz [ 1075.121664][ T25] usb 5-1: config 0 descriptor?? [ 1075.129109][T19112] wg2: entered promiscuous mode [ 1075.136923][T19112] wg2: entered allmulticast mode [ 1075.258005][T18979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.339816][ T25] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1075.347133][ T25] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1075.353696][ T25] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1075.429796][ T25] usb 5-1: USB disconnect, device number 76 [ 1075.507816][T19120] can0: slcan on ptm0. [ 1075.829897][T18979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1075.862121][T18979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1075.911996][T18979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.989415][T18979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1076.165701][T19114] can0 (unregistered): slcan off ptm0. [ 1076.238671][T19132] can: request_module (can-proto-0) failed. [ 1076.339809][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.415628][T18268] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 1076.433745][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.536834][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.544092][T13348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.580142][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.587444][T13348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.617957][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4232'. [ 1076.655081][T19136] xt_hashlimit: invalid rate [ 1076.748037][T19152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.758072][T19152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.766434][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1076.816643][T19151] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1076.995917][T18268] Bluetooth: hci8: command tx timeout [ 1077.057174][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.095311][ T25] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1077.139925][T18979] veth0_vlan: entered promiscuous mode [ 1077.158675][T18979] veth1_vlan: entered promiscuous mode [ 1077.279359][T18979] veth0_macvtap: entered promiscuous mode [ 1077.291373][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1077.323673][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1077.347635][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1077.358942][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1077.368943][T19161] wg2: entered promiscuous mode [ 1077.374001][T19161] wg2: entered allmulticast mode [ 1077.387702][T18979] veth1_macvtap: entered promiscuous mode [ 1077.395544][ T25] usb 2-1: SerialNumber: syz [ 1077.426160][ T25] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1077.452942][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.482625][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.531428][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.557932][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.596165][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.631794][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.680366][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.735495][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.774534][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.809669][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.852805][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.885218][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.895641][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.910217][ T5133] usb 2-1: USB disconnect, device number 67 [ 1077.917371][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.930814][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.944941][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.963586][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.074252][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.100304][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.126771][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.157851][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.175723][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.202876][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.221846][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.241796][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.292081][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.327796][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.346323][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.374747][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.400559][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.419725][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.436528][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.454426][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.537824][T19187] can: request_module (can-proto-0) failed. [ 1078.572299][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.610292][T19183] can0: slcan on ptm0. [ 1078.635315][T18979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.669522][T18979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.691424][T18979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.727168][T18979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.762866][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 1079.110664][T19179] can0 (unregistered): slcan off ptm0. [ 1079.171259][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.241133][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.345732][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.373959][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.430135][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.488827][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.516620][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 1081.320064][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4253'. [ 1081.517042][T19222] can: request_module (can-proto-0) failed. [ 1081.640358][ T5085] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1081.697308][T19227] can0: slcan on ptm0. [ 1081.857721][ T5085] usb 2-1: Using ep0 maxpacket: 16 [ 1081.871732][ T5085] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1081.910616][ T5085] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1081.991080][ T5085] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1082.048953][ T5085] usb 2-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 1082.067217][ T5085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.084789][ T5085] usb 2-1: Product: syz [ 1082.102043][ T5085] usb 2-1: Manufacturer: syz [ 1082.172071][ T5085] usb 2-1: SerialNumber: syz [ 1082.211093][ T5085] usb 2-1: config 0 descriptor?? [ 1082.377876][T13380] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1082.808364][T19225] can0 (unregistered): slcan off ptm0. [ 1083.693683][T19237] kcapi: manufacturer command 38 unknown. [ 1083.714157][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.723745][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.773771][ T30] audit: type=1326 audit(1719638671.610:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1083.984007][T13380] usb 3-1: Using ep0 maxpacket: 16 [ 1084.018194][ T30] audit: type=1326 audit(1719638671.610:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.022638][T13380] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1084.106199][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4260'. [ 1084.132391][ T30] audit: type=1326 audit(1719638671.610:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.240445][T13380] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1084.264979][ T30] audit: type=1326 audit(1719638671.620:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.282354][T13380] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1084.328426][ T30] audit: type=1326 audit(1719638671.620:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.377583][ T30] audit: type=1326 audit(1719638671.620:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.377709][T13380] usb 3-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 1084.399289][ C1] vkms_vblank_simulate: vblank timer overrun [ 1084.420028][T13380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.430397][T13380] usb 3-1: Product: syz [ 1084.434673][T13380] usb 3-1: Manufacturer: syz [ 1084.440103][ T30] audit: type=1326 audit(1719638671.620:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.440162][ T30] audit: type=1326 audit(1719638671.620:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.440211][ T30] audit: type=1326 audit(1719638671.620:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.440261][ T30] audit: type=1326 audit(1719638671.630:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19219 comm="syz.1.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40a175b99 code=0x7ffc0000 [ 1084.520164][ T5184] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1084.534177][T13380] usb 3-1: SerialNumber: syz [ 1084.546710][T13380] usb 3-1: config 0 descriptor?? [ 1084.748622][ T5184] usb 5-1: Using ep0 maxpacket: 8 [ 1084.762024][ T5184] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=c2.2c [ 1084.787394][ T5184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.807363][T19256] blktrace: Concurrent blktraces are not allowed on loop7 [ 1085.066865][ T5184] usb 5-1: Product: syz [ 1085.072335][ T5184] usb 5-1: Manufacturer: syz [ 1085.076978][ T5184] usb 5-1: SerialNumber: syz [ 1085.111707][ T5184] usb 5-1: config 0 descriptor?? [ 1085.651622][T19260] kcapi: manufacturer command 38 unknown. [ 1085.662465][T19260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.671359][T19260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.065834][ T5184] usb 5-1: MBOX3: Invalid descriptor size=18. [ 1086.383236][T19244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.499722][T19244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.587931][ T5085] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1086.596144][ T5085] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1086.611725][ T5085] usb 2-1: USB disconnect, device number 68 [ 1086.657593][T19244] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1086.736174][ T5184] usb 5-1: USB disconnect, device number 77 [ 1086.808065][T19267] can0: slcan on ptm1. [ 1087.029238][ T5085] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1087.146207][T13380] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1087.160490][T13380] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1087.172173][T13380] usb 3-1: USB disconnect, device number 77 [ 1087.352248][ T5085] usb 2-1: config index 0 descriptor too short (expected 49, got 36) [ 1087.377097][ T5085] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.397469][ T5085] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1087.412415][ T5085] usb 2-1: config index 1 descriptor too short (expected 49, got 36) [ 1087.425014][ T5085] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.435939][ T5085] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1087.449587][ T5085] usb 2-1: config index 2 descriptor too short (expected 49, got 36) [ 1087.461891][ T5085] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.502290][ T5085] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 1087.530708][ T5085] usb 2-1: string descriptor 0 read error: -22 [ 1087.546445][ T5085] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1087.560587][T19265] can0 (unregistered): slcan off ptm1. [ 1087.572910][ T5085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.597768][ T5085] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 1087.616617][ T5085] usb 2-1: no configuration chosen from 3 choices [ 1087.686531][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4274'. [ 1087.834921][T19281] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1088.509781][ T5085] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1088.729877][ T5085] usb 3-1: Using ep0 maxpacket: 16 [ 1088.742223][ T5085] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1088.769823][ T5085] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1088.799871][ T5085] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.832761][ T5085] usb 3-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 1088.849852][ T5085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.858301][ T5085] usb 3-1: Product: syz [ 1088.873847][ T5085] usb 3-1: Manufacturer: syz [ 1088.878521][ T5085] usb 3-1: SerialNumber: syz [ 1088.904643][ T5085] usb 3-1: config 0 descriptor?? [ 1089.052940][T19300] can0: slcan on ptm0. [ 1089.123990][T19302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.133698][T19302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.825237][T19304] kcapi: manufacturer command 38 unknown. [ 1089.835151][T19304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.843912][T19304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.880032][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1089.880084][ T30] audit: type=1326 audit(1719638678.157:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1089.907960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.284123][T18268] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1090.294351][T18268] Bluetooth: hci4: Injecting HCI hardware error event [ 1090.326021][T13150] Bluetooth: hci4: hardware error 0x00 [ 1090.467064][ T9353] usb 2-1: USB disconnect, device number 69 [ 1090.474054][ T30] audit: type=1326 audit(1719638678.157:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.509338][ T30] audit: type=1326 audit(1719638678.167:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.532254][ T30] audit: type=1326 audit(1719638678.167:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.556606][ T30] audit: type=1326 audit(1719638678.167:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.579386][T19298] can0 (unregistered): slcan off ptm0. [ 1090.589650][ T30] audit: type=1326 audit(1719638678.167:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.653195][ T30] audit: type=1326 audit(1719638678.167:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.675449][ T30] audit: type=1326 audit(1719638678.167:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.698872][ T30] audit: type=1326 audit(1719638678.167:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.727265][ T30] audit: type=1326 audit(1719638678.167:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19288 comm="syz.2.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833e975b99 code=0x7ffc0000 [ 1090.749003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.769472][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1091.701808][ T5085] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1092.318960][ T5085] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1092.337166][ T5085] usb 3-1: USB disconnect, device number 78 [ 1092.443288][T13150] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1092.481877][T13812] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1092.552899][T19337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.564613][T19334] wg2: left promiscuous mode [ 1092.569424][T19334] wg2: left allmulticast mode [ 1092.607454][T19337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.830889][T13812] usb 5-1: no configurations [ 1092.835677][T13812] usb 5-1: can't read configurations, error -22 [ 1092.845617][T19334] wg2: entered promiscuous mode [ 1092.853369][T19334] wg2: entered allmulticast mode [ 1093.767235][T19342] can0: slcan on ptm0. [ 1093.791950][T13812] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1093.912430][T19338] can0 (unregistered): slcan off ptm0. [ 1094.038412][T13812] usb 5-1: no configurations [ 1094.073447][T13812] usb 5-1: can't read configurations, error -22 [ 1094.088831][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 1094.132612][T13812] usb usb5-port1: attempt power cycle [ 1094.582254][ T5085] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1094.862028][ T5085] usb 3-1: Using ep0 maxpacket: 32 [ 1094.879952][ T5085] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1094.920335][ T5085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.956174][ T5085] usb 3-1: Product: syz [ 1094.968435][ T5085] usb 3-1: Manufacturer: syz [ 1094.983364][ T5085] usb 3-1: SerialNumber: syz [ 1095.008882][ T5085] usb 3-1: config 0 descriptor?? [ 1095.243551][ T5085] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 1095.304465][ T5085] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 1095.341008][ T5085] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1095.448566][ T5085] usb 3-1: USB disconnect, device number 79 [ 1095.749674][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1095.775480][T19374] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1095.818448][T19374] batman_adv: batadv4: Interface deactivated: netdevsim0 [ 1095.881152][T19374] batman_adv: batadv4: Removing interface: netdevsim0 [ 1095.956233][T19374] batman_adv: batadv7: Adding interface: netdevsim0 [ 1095.993438][T19374] batman_adv: batadv7: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.028648][T19374] batman_adv: batadv7: Interface activated: netdevsim0 [ 1096.144228][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4314'. [ 1096.153896][T19387] can0: slcan on ptm0. [ 1096.209384][T19389] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1096.762912][ T5085] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1096.844495][T19379] can0 (unregistered): slcan off ptm0. [ 1096.969550][ T5085] usb 3-1: config index 0 descriptor too short (expected 49, got 36) [ 1097.005203][ T5085] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1097.047044][ T5085] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1097.113344][ T5085] usb 3-1: config index 1 descriptor too short (expected 49, got 36) [ 1097.134643][ T5085] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1097.160486][ T5085] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1097.193511][ T5085] usb 3-1: config index 2 descriptor too short (expected 49, got 36) [ 1097.203000][ T5085] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1097.214546][ T5085] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1097.247545][ T5085] usb 3-1: string descriptor 0 read error: -22 [ 1097.255659][ T5085] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1097.265454][ T5085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.314822][ T5085] adutux 3-1:168.0: interrupt endpoints not found [ 1099.575047][T13380] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1099.776260][ T5184] usb 3-1: USB disconnect, device number 80 [ 1099.927897][T13380] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=42.f5 [ 1099.943255][T13380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.002216][T13380] usb 5-1: Product: syz [ 1100.023790][T13380] usb 5-1: Manufacturer: syz [ 1100.038674][T13380] usb 5-1: SerialNumber: syz [ 1100.064327][T13380] usb 5-1: config 0 descriptor?? [ 1100.103858][T13380] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 1100.138609][T13380] earthmate ttyUSB0: required endpoint is missing [ 1100.157864][T19445] can0: slcan on ptm0. [ 1100.310908][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1100.310928][ T30] audit: type=1400 audit(1719638689.004:1256): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=19448 comm="syz.3.4332" daddr=::ffff:172.20.20.187 [ 1100.354740][T19427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.404121][T19427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.502700][T19239] usb 5-1: USB disconnect, device number 81 [ 1100.520307][T19239] cypress_m8 5-1:0.0: device disconnected [ 1100.591537][T19453] can1: slcan on ptm1. [ 1100.794624][T19443] can0 (unregistered): slcan off ptm0. [ 1101.365312][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1101.517597][T19451] can1 (unregistered): slcan off ptm1. [ 1101.706675][T13380] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1101.783881][T19239] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1101.805445][ T30] audit: type=1400 audit(1719638690.504:1257): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="subj_type" requested=w pid=19480 comm="syz.4.4344" daddr=::ffff:172.20.20.187 [ 1101.946247][T13380] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1101.957332][T13380] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1101.965643][T19475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1101.983240][T13380] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1102.003877][T13380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1102.013284][T13380] usb 3-1: SerialNumber: syz [ 1102.025990][T19239] usb 2-1: config index 0 descriptor too short (expected 49, got 36) [ 1102.035729][T19239] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1102.052374][T13380] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1102.065192][T19239] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1102.085342][T19239] usb 2-1: config index 1 descriptor too short (expected 49, got 36) [ 1102.103509][T19239] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1102.129561][T19239] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1102.162450][T19239] usb 2-1: config index 2 descriptor too short (expected 49, got 36) [ 1102.206387][T19239] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1102.244086][T19239] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1102.301992][T19239] usb 2-1: string descriptor 0 read error: -22 [ 1102.314650][T19239] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1102.327535][T19489] can0: slcan on ptm0. [ 1102.343772][T19239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.381146][T19239] adutux 2-1:168.0: interrupt endpoints not found [ 1102.566385][T19492] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1103.413222][T18268] Bluetooth: hci7: command 0x0406 tx timeout [ 1103.867355][T19485] can0 (unregistered): slcan off ptm0. [ 1103.881737][ T5133] usb 3-1: USB disconnect, device number 81 [ 1104.018876][T13150] Bluetooth: hci7: ACL packet for unknown connection handle 200 [ 1104.351997][ T30] audit: type=1800 audit(1719638693.043:1258): pid=19515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4357" name="bus" dev="sda1" ino=2010 res=0 errno=0 [ 1104.382374][T19517] binder: 19516:19517 ioctl c0306201 0 returned -14 [ 1104.409045][T19517] binder: 19516:19517 ioctl 8933 20000340 returned -22 [ 1104.418629][T19517] binder: 19516:19517 ioctl 4008f50a 0 returned -22 [ 1104.596753][T19522] program syz.4.4358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.715755][T19522] bond0: entered promiscuous mode [ 1104.726800][T19522] bond_slave_0: entered promiscuous mode [ 1104.745911][T19522] bond_slave_1: entered promiscuous mode [ 1104.851887][T13812] usb 2-1: USB disconnect, device number 70 [ 1105.166644][T19535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1105.257888][T19533] can0: slcan on ptm0. [ 1105.464542][ T5133] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1105.497146][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1105.527701][T13812] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1105.696715][ T5133] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1105.737538][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.765108][T13812] usb 5-1: Using ep0 maxpacket: 32 [ 1105.781478][T13812] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1105.784719][ T5133] usb 2-1: config 0 descriptor?? [ 1105.807345][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.807403][ T5133] cp210x 2-1:0.0: cp210x converter detected [ 1105.832663][T13812] usb 5-1: Product: syz [ 1105.854092][T13812] usb 5-1: Manufacturer: syz [ 1105.867695][T13812] usb 5-1: SerialNumber: syz [ 1105.891687][T13812] usb 5-1: config 0 descriptor?? [ 1106.027825][T19529] can0 (unregistered): slcan off ptm0. [ 1106.115033][T13812] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1106.144899][T19554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.153934][T19554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.161965][T13812] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1106.176145][T13812] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1106.219239][T13812] usb 5-1: USB disconnect, device number 82 [ 1106.237402][T19535] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1106.273866][T19535] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1106.295989][T19535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1106.361231][T19535] input: syz1 as /devices/virtual/input/input46 [ 1107.449367][ T5133] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1107.465057][ T5133] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1107.515201][ T5133] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1107.529261][ T5133] usb 2-1: USB disconnect, device number 71 [ 1107.555295][ T5133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1107.563510][ T5133] cp210x 2-1:0.0: device disconnected [ 1108.562399][T19239] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1108.848177][T19239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1108.890653][T19239] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=7f.41 [ 1108.925452][T19239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.968070][T19239] usb 5-1: Product: syz [ 1108.997068][T19239] usb 5-1: Manufacturer: syz [ 1109.014276][T19239] usb 5-1: SerialNumber: syz [ 1109.028986][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4383'. [ 1109.041439][T19239] usb 5-1: config 0 descriptor?? [ 1109.057261][T19239] rndis_host 5-1:0.0: skipping garbage [ 1109.067418][T19239] usb 5-1: bad CDC descriptors [ 1109.079321][T19601] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1109.081847][T19239] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1109.095425][T19239] ftdi_sio ttyUSB0: unknown device type: 0x7f41 [ 1109.122283][T19606] batman_adv: batadv7: Interface deactivated: netdevsim0 [ 1109.146360][T19606] batman_adv: batadv7: Removing interface: netdevsim0 [ 1109.163878][T19606] batman_adv: batadv8: Adding interface: netdevsim0 [ 1109.219870][T19606] batman_adv: batadv8: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1109.245486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.294967][T19606] batman_adv: batadv8: Interface activated: netdevsim0 [ 1109.398139][T19611] program syz.0.4385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1109.415036][T19612] input: syz1 as /devices/virtual/input/input47 [ 1109.460042][T19611] bond0: entered promiscuous mode [ 1109.472241][T19611] bond_slave_0: entered promiscuous mode [ 1109.478590][T19611] bond_slave_1: entered promiscuous mode [ 1109.604666][ T5184] usb 5-1: USB disconnect, device number 83 [ 1109.637908][ T5184] ftdi_sio 5-1:0.0: device disconnected [ 1109.652199][T19614] netlink: 'syz.3.4388': attribute type 1 has an invalid length. [ 1109.723441][T19614] bond1: entered promiscuous mode [ 1110.274981][T19640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.289494][T19640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.549666][ T5089] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1111.042768][T19646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.050465][T19646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.057648][T19646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.147893][ T5089] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1111.157419][ T5089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.172816][ T5089] usb 2-1: config 0 descriptor?? [ 1111.176212][T19649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1111.292074][ T5089] cp210x 2-1:0.0: cp210x converter detected [ 1111.516202][ T5089] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1111.702556][ T5133] usb 2-1: USB disconnect, device number 72 [ 1111.753087][ T5133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1111.788885][ T5133] cp210x 2-1:0.0: device disconnected [ 1111.826416][T19663] wg2: left promiscuous mode [ 1111.832316][T19663] wg2: left allmulticast mode [ 1111.878001][T19663] wg2: entered promiscuous mode [ 1111.886417][T19663] wg2: entered allmulticast mode [ 1112.216704][ T31] INFO: task syz.0.3834:17783 blocked for more than 143 seconds. [ 1112.233579][ T31] Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1112.256412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1112.286789][ T31] task:syz.0.3834 state:D stack:23248 pid:17783 tgid:17783 ppid:17232 flags:0x00004006 [ 1112.326070][ T31] Call Trace: [ 1112.333201][ T31] [ 1112.339927][ T31] __schedule+0x1796/0x49d0 [ 1112.352862][ T31] ? __pfx___schedule+0x10/0x10 [ 1112.368862][ T31] ? __pfx_lock_release+0x10/0x10 [ 1112.375771][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 1112.382769][ T31] ? schedule+0x90/0x320 [ 1112.390718][ T31] schedule+0x14b/0x320 [ 1112.400014][ T31] schedule_preempt_disabled+0x13/0x30 [ 1112.406030][ T31] __mutex_lock+0x6a4/0xd70 [ 1112.415009][ T31] ? __mutex_lock+0x527/0xd70 [ 1112.420657][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 1112.431849][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1112.441611][ T31] ? net_generic+0x1f/0x240 [ 1112.447060][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 1112.453710][ T31] nfsd_umount+0x43/0xd0 [ 1112.465913][ T31] deactivate_locked_super+0xc4/0x130 [ 1112.489872][ T31] cleanup_mnt+0x41f/0x4b0 [ 1112.501150][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 1112.510099][ T31] task_work_run+0x24f/0x310 [ 1112.519414][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1112.538498][ T31] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1112.550573][ T31] syscall_exit_to_user_mode+0x168/0x370 [ 1112.576474][ T31] do_syscall_64+0x100/0x230 [ 1112.586023][ T31] ? clear_bhb_loop+0x35/0x90 [ 1112.591003][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.597319][ T31] RIP: 0033:0x7f8caf175b99 [ 1112.601964][ T31] RSP: 002b:00007ffde3526558 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1112.611315][ T31] RAX: 0000000000000000 RBX: 00000000000ec5a5 RCX: 00007f8caf175b99 [ 1112.619598][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1112.628366][ T31] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001be352686f [ 1112.636632][ T31] R10: 00007f8caf000000 R11: 0000000000000246 R12: 00007f8caf303fac [ 1112.644727][ T31] R13: 0000000000000032 R14: 00007f8caf305aa0 R15: 00007f8caf303fa0 [ 1112.653005][ T31] [ 1112.656283][ T31] [ 1112.656283][ T31] Showing all locks held in the system: [ 1112.674628][ T31] 1 lock held by khungtaskd/31: [ 1112.681892][ T31] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1112.692458][ T31] 3 locks held by kworker/u8:5/82: [ 1112.697787][ T31] 5 locks held by kworker/u8:9/2444: [ 1112.703284][ T31] 2 locks held by getty/4839: [ 1112.708206][ T31] #0: ffff88802b5b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1112.718264][ T31] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1112.729181][ T31] 2 locks held by syz.4.3809/17707: [ 1112.734498][ T31] #0: ffffffff8f63b0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1112.742995][ T31] #1: ffffffff8e600128 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1112.753575][ T31] 2 locks held by syz.0.3834/17783: [ 1112.758923][ T31] #0: ffff88807bf160e0 (&type->s_umount_key#77){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 1112.770414][ T31] #1: ffffffff8e600128 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1112.780222][ T31] 2 locks held by syz.2.4152/18864: [ 1112.785629][ T31] #0: ffffffff8f63b0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1112.796394][ T31] #1: ffffffff8e600128 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1112.806889][ T31] 2 locks held by syz.0.4400/19654: [ 1112.812194][ T31] #0: ffff888063ac3e10 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 1112.822598][ T31] #1: ffff88802a8da258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb8/0x670 [ 1112.832979][ T31] [ 1112.835417][ T31] ============================================= [ 1112.835417][ T31] [ 1112.846829][ T31] NMI backtrace for cpu 1 [ 1112.851209][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1112.861128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1112.871218][ T31] Call Trace: [ 1112.874564][ T31] [ 1112.877521][ T31] dump_stack_lvl+0x241/0x360 [ 1112.882252][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.887495][ T31] ? __pfx__printk+0x10/0x10 [ 1112.890497][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806a04fc00: rx timeout, send abort [ 1112.892103][ T31] ? vprintk_emit+0x631/0x770 [ 1112.892143][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 1112.900860][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806a04fc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1112.905030][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 1112.905069][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1112.934852][ T31] ? _printk+0xd5/0x120 [ 1112.939048][ T31] ? __pfx__printk+0x10/0x10 [ 1112.943649][ T31] ? __wake_up_klogd+0xcc/0x110 [ 1112.948515][ T31] ? __pfx__printk+0x10/0x10 [ 1112.953117][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 1112.958158][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1112.964185][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1112.970224][ T31] watchdog+0xfde/0x1020 [ 1112.974579][ T31] ? watchdog+0x1ea/0x1020 [ 1112.979015][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.983705][ T31] kthread+0x2f0/0x390 [ 1112.987793][ T31] ? __pfx_watchdog+0x10/0x10 [ 1112.992479][ T31] ? __pfx_kthread+0x10/0x10 [ 1112.997086][ T31] ret_from_fork+0x4b/0x80 [ 1113.001516][ T31] ? __pfx_kthread+0x10/0x10 [ 1113.006123][ T31] ret_from_fork_asm+0x1a/0x30 [ 1113.011024][ T31] [ 1113.015176][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1113.020990][ C0] NMI backtrace for cpu 0 [ 1113.021005][ C0] CPU: 0 PID: 2444 Comm: kworker/u8:9 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1113.021025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1113.021037][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1113.021070][ C0] RIP: 0010:stack_trace_consume_entry+0xd2/0x280 [ 1113.021091][ C0] Code: 26 4c 89 0c 24 48 89 df 49 89 f5 4d 89 c6 e8 15 b5 76 00 4d 89 f0 4c 8b 0c 24 4c 89 ee 48 ba 00 00 00 00 00 fc ff df 48 8b 1b <45> 8d 70 01 41 0f b6 04 17 84 c0 0f 85 31 01 00 00 45 89 31 4a 8d [ 1113.021106][ C0] RSP: 0018:ffffc90008fb7650 EFLAGS: 00000246 [ 1113.021120][ C0] RAX: 1ffff920011f6ef0 RBX: ffffc90008fb7820 RCX: ffff88802a620000 [ 1113.021135][ C0] RDX: dffffc0000000000 RSI: ffffffff81f88df0 RDI: ffffc90008fb778c [ 1113.021148][ C0] RBP: ffffc90008fb7788 R08: 0000000000000001 R09: ffffc90008fb7790 [ 1113.021161][ C0] R10: 0000000000000003 R11: ffffffff8181df70 R12: 1ffff920011f6ef1 [ 1113.021175][ C0] R13: 1ffff920011f6ef1 R14: 0000000000000000 R15: 1ffff920011f6ef2 [ 1113.021188][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1113.021203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1113.021216][ C0] CR2: 00007fa40a2d03f8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1113.021249][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1113.021261][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1113.021273][ C0] Call Trace: [ 1113.021279][ C0] [ 1113.021287][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1113.021309][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1113.021343][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1113.021362][ C0] ? nmi_handle+0x2a/0x5a0 [ 1113.021397][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1113.021417][ C0] ? nmi_handle+0x14f/0x5a0 [ 1113.021443][ C0] ? nmi_handle+0x2a/0x5a0 [ 1113.021469][ C0] ? stack_trace_consume_entry+0xd2/0x280 [ 1113.021490][ C0] ? default_do_nmi+0x63/0x160 [ 1113.021511][ C0] ? exc_nmi+0x123/0x1f0 [ 1113.021531][ C0] ? end_repeat_nmi+0xf/0x53 [ 1113.021579][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1113.021600][ C0] ? kasan_save_free_info+0x40/0x50 [ 1113.021624][ C0] ? stack_trace_consume_entry+0xd2/0x280 [ 1113.021649][ C0] ? stack_trace_consume_entry+0xd2/0x280 [ 1113.021668][ C0] ? stack_trace_consume_entry+0xd2/0x280 [ 1113.021687][ C0] [ 1113.021693][ C0] [ 1113.021700][ C0] ? __kernel_text_address+0xd/0x40 [ 1113.021725][ C0] ? kasan_save_free_info+0x40/0x50 [ 1113.021747][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1113.021766][ C0] arch_stack_walk+0x143/0x1b0 [ 1113.021797][ C0] ? ieee80211_iface_work+0x270/0xf10 [ 1113.021824][ C0] ? kasan_save_free_info+0x40/0x50 [ 1113.021850][ C0] stack_trace_save+0x118/0x1d0 [ 1113.021869][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1113.021903][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1113.021925][ C0] kasan_save_track+0x3f/0x80 [ 1113.021950][ C0] ? kasan_save_track+0x3f/0x80 [ 1113.022006][ C0] ? skb_release_data+0x64d/0x880 [ 1113.022031][ C0] ? ieee80211_iface_work+0x270/0xf10 [ 1113.022058][ C0] kasan_save_free_info+0x40/0x50 [ 1113.022080][ C0] poison_slab_object+0xe0/0x150 [ 1113.022108][ C0] ? ieee80211_iface_work+0x270/0xf10 [ 1113.022135][ C0] __kasan_slab_free+0x37/0x60 [ 1113.022163][ C0] kmem_cache_free+0x145/0x350 [ 1113.022189][ C0] ieee80211_iface_work+0x270/0xf10 [ 1113.022223][ C0] cfg80211_wiphy_work+0x221/0x260 [ 1113.022253][ C0] ? process_scheduled_works+0x945/0x1830 [ 1113.022272][ C0] process_scheduled_works+0xa2c/0x1830 [ 1113.022308][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1113.022333][ C0] ? assign_work+0x364/0x3d0 [ 1113.022354][ C0] worker_thread+0x86d/0xd50 [ 1113.022383][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1113.022405][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1113.022425][ C0] kthread+0x2f0/0x390 [ 1113.022446][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1113.022465][ C0] ? __pfx_kthread+0x10/0x10 [ 1113.022488][ C0] ret_from_fork+0x4b/0x80 [ 1113.022512][ C0] ? __pfx_kthread+0x10/0x10 [ 1113.022534][ C0] ret_from_fork_asm+0x1a/0x30 [ 1113.022569][ C0] [ 1113.438794][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1113.445700][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 1113.455634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1113.465723][ T31] Call Trace: [ 1113.469026][ T31] [ 1113.471975][ T31] dump_stack_lvl+0x241/0x360 [ 1113.476699][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.481965][ T31] ? __pfx__printk+0x10/0x10 [ 1113.486601][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1113.492629][ T31] ? vscnprintf+0x5d/0x90 [ 1113.496991][ T31] panic+0x349/0x860 [ 1113.500908][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1113.507071][ T31] ? __pfx_panic+0x10/0x10 [ 1113.511500][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1113.516896][ T31] ? __irq_work_queue_local+0x137/0x410 [ 1113.522487][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 1113.527960][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1113.534127][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1113.540297][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1113.546471][ T31] watchdog+0x101d/0x1020 [ 1113.550819][ T31] ? watchdog+0x1ea/0x1020 [ 1113.555255][ T31] ? __pfx_watchdog+0x10/0x10 [ 1113.559947][ T31] kthread+0x2f0/0x390 [ 1113.564042][ T31] ? __pfx_watchdog+0x10/0x10 [ 1113.568732][ T31] ? __pfx_kthread+0x10/0x10 [ 1113.573352][ T31] ret_from_fork+0x4b/0x80 [ 1113.577786][ T31] ? __pfx_kthread+0x10/0x10 [ 1113.582395][ T31] ret_from_fork_asm+0x1a/0x30 [ 1113.587192][ T31] [ 1113.590505][ T31] Kernel Offset: disabled [ 1113.594835][ T31] Rebooting in 86400 seconds..